Hosts able to cross vlan

I have 3 catalyst 4006 switches, configured with 2 vlans that span all 3. If on one vlan you specify an address from the other vlan as your gateway, you can cross vlans. Anybody have any idea what I’m missing? I have portfast on all ports except the trunks and am using dot1q encapsulation.